$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa File: a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa (raw, json) Hash identifier: aS9yzMjXiVLH/an44OdAup7Cna7OOmfJw+dfu8MGfjQ= Subject key identifier: 06:7C:5D:A3:EC:00:89:9B:7E:81:29:84:C2:6A:4C:38:41:9E:07:D6 Certificate issuer: /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907 Certificate serial: 010D0C9F432858486EF5BD41D2DFF56D89C08B50 Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa Signing time: Sat 04 Jan 2025 14:00:51 +0000 ROA not before: Sat 04 Jan 2025 14:00:51 +0000 ROA not after: Fri 04 Apr 2025 13:00:51 +0000 asID: 36175 IP address blocks: 66.43.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6e:f5:bd:41:d2:df:f5:6d:89:c0:8b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907 Validity Not Before: Jan 4 14:00:51 2025 GMT Not After : Apr 4 13:00:51 2025 GMT Subject: CN=ddfc4f26-3e4e-4ad0-87e5-a20ec4089e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:04:04:06:ea:1e:8f:7a:a0:e5:79:5d:06: 7c:f2:50:34:98:7c:93:26:cf:48:98:83:a2:0d:fd: 11:50:dc:38:02:cf:5d:bd:dd:f5:51:5d:86:9e:aa: df:a4:82:ff:c4:13:7e:32:fc:0e:22:6e:24:15:a8: c6:ad:2f:22:4b:c0:64:8f:29:6e:9d:d9:43:7a:97: c8:05:0b:a9:cd:c8:c9:19:59:36:3d:7e:b2:a8:42: e6:ef:7c:39:11:e2:61:4c:b4:66:d9:cf:5e:20:32: 78:f7:cd:0d:15:fc:9f:d7:61:67:4a:9f:4f:31:72: f3:ed:18:1b:94:e8:0d:2d:70:9a:b7:59:cd:36:f0: 03:2d:45:36:c5:04:23:56:65:1e:da:60:98:91:cd: c6:77:86:d2:68:b7:df:0e:db:b7:37:2c:b0:e1:f1: 29:98:5d:8e:4a:5f:1f:ec:a6:e8:14:c4:ad:0c:a5: c5:33:99:41:10:29:eb:dc:d5:31:1c:76:d2:6a:10: ef:68:92:b6:13:1c:d4:ab:83:5d:cf:bc:be:ed:50: e7:01:3b:3a:b6:a5:4b:a6:cd:85:4c:02:bd:37:38: e3:66:01:dc:8e:be:48:e3:4f:65:d4:08:86:cb:ec: 89:bf:0a:6e:f2:fe:e9:d4:09:2c:8a:4c:8d:92:4f: d7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7C:5D:A3:EC:00:89:9B:7E:81:29:84:C2:6A:4C:38:41:9E:07:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/a0467b4e-5d33-3ebb-a8d2-3f908c2a1ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl X509v3 Authority Key Identifier: keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer sbgp-ipAddrBlock: critical IPv4: 66.43.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:77:0c:0d:d4:96:05:f8:55:ec:63:8c:63:c9:a1:98:f7:0c: f2:d8:5f:14:82:f9:36:53:51:92:99:fe:59:44:c5:e8:7b:38: b3:75:05:8a:33:a3:0b:80:af:d0:88:34:e0:64:61:a3:bb:e2: da:cd:8e:52:99:ae:61:b9:f9:42:39:91:ea:2e:39:da:a6:fb: 56:c7:71:5d:91:48:d6:2e:89:a3:a8:68:1b:01:4e:69:08:1d: c0:a7:e5:b3:37:58:23:ec:1c:69:ca:02:5a:a8:83:28:b3:05: 12:0f:07:07:6b:e9:f4:19:da:5b:d1:7e:a8:bf:ee:42:79:b6: ed:24:14:2e:7e:08:ab:5d:03:81:63:7b:4c:b2:10:a1:6a:27: 57:66:0c:9e:78:67:5c:c1:74:d7:54:6e:02:f1:f9:5b:db:98: cb:45:6a:ec:ba:c6:62:70:9e:8d:a4:ba:7e:d7:15:72:a9:47: b2:c2:e3:ee:87:12:85:9b:4d:fa:96:0c:af:f8:3f:4d:d8:6d: 5e:9e:cb:3e:54:b9:6d:12:52:e2:e2:2b:1b:3c:8c:5c:fc:42: af:a3:41:fc:b3:d7:42:13:45:03:a8:51:37:1e:e9:c9:29:9e: 3c:15:5a:01:77:7f:2e:4b:23:15:fc:f2:ca:63:7d:3d:54:47: 42:66:fa:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhu9b1B0t/1bYnAi1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0ODNmMmYtY2JhYS00YzJiLWE5ZTQtOGFmM2MwZjg2 OTA3MB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk ZGRmYzRmMjYtM2U0ZS00YWQwLTg3ZTUtYTIwZWM0MDg5ZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorEEBAbqHo96oOV5XQZ88lA0mHyTJs9ImIOi Df0RUNw4As9dvd31UV2GnqrfpIL/xBN+MvwOIm4kFajGrS8iS8BkjylundlDepfI BQupzcjJGVk2PX6yqELm73w5EeJhTLRm2c9eIDJ4980NFfyf12FnSp9PMXLz7Rgb lOgNLXCat1nNNvADLUU2xQQjVmUe2mCYkc3Gd4bSaLffDtu3Nyyw4fEpmF2OSl8f 7KboFMStDKXFM5lBECnr3NUxHHbSahDvaJK2ExzUq4Ndz7y+7VDnATs6tqVLps2F TAK9NzjjZgHcjr5I409l1AiGy+yJvwpu8v7p1AksikyNkk/X4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZ8XaPsAImbfoEphMJqTDhBngfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4 M2YyZi1jYmFhLTRjMmItYTllNC04YWYzYzBmODY5MDcvYTA0NjdiNGUtNWQzMy0z ZWJiLWE4ZDItM2Y5MDhjMmExY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmU0ODNmMmYtY2JhYS00YzJiLWE5 ZTQtOGFmM2MwZjg2OTA3L2JlNDgzZjJmLWNiYWEtNGMyYi1hOWU0LThhZjNjMGY4 NjkwNy5jcmwwHwYDVR0jBBgwFoAUTmq1lDv9BWbGGz6WTJWAGkgd3sEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZTQ4M2YyZi1jYmFhLTRjMmItYTllNC04YWYz YzBmODY5MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQisQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx3DA3UlgX4VexjjGPJoZj3DPLYXxSC+TZTUZKZ/llExeh7OLN1BYoz owuAr9CINOBkYaO74trNjlKZrmG5+UI5keouOdqm+1bHcV2RSNYuiaOoaBsBTmkI HcCn5bM3WCPsHGnKAlqogyizBRIPBwdr6fQZ2lvRfqi/7kJ5tu0kFC5+CKtdA4Fj e0yyEKFqJ1dmDJ54Z1zBdNdUbgLx+VvbmMtFauy6xmJwno2kun7XFXKpR7LC4+6H EoWbTfqWDK/4P03YbV6eyz5UuW0SUuLiKxs8jFz8Qq+jQfyz10ITRQOoUTce6ckp njwVWgF3fy5LIxX88spjfT1UR0Jm+uA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:52 2025 by rpki-client